BlackBerry OS 10¶

Blackberry 10 supports IKEv2 with PSK, PKI, EAP-TLS and EAP-MSCHAPv2 authentication. You should choose "Generic IKEv2 VPN Server" as a gateway type.
Server could be authenticated by IPv4 address, FQDN, Email in certificate, General or Distinguished name.

Works fine with the following config:

conn %default
    # left - local (server) side
    left=%any
    leftauth=pubkey
    leftcert=your_cert.crt
    leftsendcert=always
    leftsubnet=0.0.0.0/0

    # right - remote (client) side
    right=%any
    rightauth=pubkey
    rightsourceip=192.168.103.0/24
    rightdns=8.8.8.8

conn ikev2-pubkey
    keyexchange=ikev2
    auto=add